bnmbertsurheoppopopooooooooooooooopoopopdf'tdfg

hjkhghoppoopppooppoppoppoopoirh bnmbertsurheoppopopooooooooooooooopoopopdf'tdfg

<?php
require_once 'lib/core.php';

if(isset($_POST["from"]) && isset($_POST["to"])){

$from=test_input($_POST['from']);
   $to=test_input($_POST['to']);
   $distance=test_input($_POST['distance']);
   $discount=test_input($_POST['discount']);
   $status=test_input($_POST['status']);

$sql="insert into route(city1,city2,distance,discount,status) values('$from','$to','$distance','$discount','$status')";            
   if($conn->query($sql))
   {
    $id=$conn->insert_id;
    $success="no";
    foreach($_POST['cab_type'] as $cab_type)
    {
        $amount=$cab_type['amount'];
        $cab_id=$cab_type['id'];
        $extra_amount=$cab_type['extra_amount'];
        $route_type=$cab_type['route_type'];
        $date_from=$cab_type['date_from'];
        $date_to=$cab_type['date_to'];
        $price=$cab_type['price'];
        $sql="insert into cab_route(cab_type,amount,route_id,extra_amount,route_type,date_from,date_to,price) values('$cab_id','$amount','$id','$extra_amount','$route_type'," . ($date_from==NULL ? "NULL" : "'$date_from'") . "," . ($date_to==NULL ? "NULL" : "'$date_to'") . ",'$price')";
        if($cab_id!="" && $amount!=""){
            if($conn->query($sql))
            {
                $success="ok";
            }

else
            {
                $sql="delete from cab_route where route_id=$id";
                $conn->query($sql);
                $sql="delete from route where id=$id";
                $conn->query($sql);
                $success="no";
            }
        }else{
            $success="ok";
        }
    }
    if($success=="ok")
        echo "success";
    else
        echo "error";
}
else
{
  echo "error";
}
}
//DELETING CAB DATA

if(isset($_POST['delete_id']))
{
   $id_d=$_POST["delete_id"];

$sql=$conn->query("delete from route where id='$id_d'");
 $sql=$conn->query("delete from cab_route where route_id='$id_d'");
   if($sql)
   {
       echo "Success";			
   }
   else
   {
       echo "error";
   }

}

//UPDATING Packages DATA

if(isset($_POST["route_id"]))
{
    $route_id=$_POST["route_id"];
    $from=test_input($_POST['edit_from']);
    $to=test_input($_POST['edit_to']);
    $distance=test_input($_POST['distance']);
    $discount=test_input($_POST['discount']);
    $status=test_input($_POST['status']);
    $sql="update route set distance='$distance',city1='$from',city2='$to',discount='$discount',status='$status' where id='$route_id'";
    if($conn->query($sql))
    {
      $success="no";
      $sql="delete from cab_route where route_id='$route_id'";
      $conn->query($sql);
      foreach($_POST['cab_type'] as $ecab_type)
      {
        $amount=$ecab_type['amount'];
        $cab_id=$ecab_type['id'];
        $extra_amount=$ecab_type['extra_amount'];
        $route_type=$ecab_type['route_type'];
        $date_from=$ecab_type['date_from'];
        $date_to=$ecab_type['date_to'];
        $price=$ecab_type['price'];
        $sql="insert into cab_route(cab_type,amount,route_id,extra_amount,route_type,date_from,date_to,price) values('$cab_id','$amount','$route_id','$extra_amount','$route_type'," . ($date_from==NULL ? "NULL" : "'$date_from'") . "," . ($date_to==NULL ? "NULL" : "'$date_to'") . ",'$price')";
        if($cab_id!="" && $amount!=""){
            if($conn->query($sql))
            {
                $success="ok";
            }
            else
            {
                $sql="delete from cab_route where route_id='$route_id'";
                $conn->query($sql);
                $sql="delete from route where id='$route_id'";
                $conn->query($sql);
                $success="no";
            }
        }else{
            $success="ok";
        }
    }
    if($success=="ok")
        echo "success";
    else
        echo "error1";
}
else
{
  echo "error2";
}
}